This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/3137302e3135302e382e302f32322d3234203d3e20323634373132.roa
File:                     3137302e3135302e382e302f32322d3234203d3e20323634373132.roa (raw, json)
Hash identifier:          NZvuErqr3VYeQz6YWVWV9SlQgJiDeMj89tcBl2+Qkjc=
Subject key identifier:   32:ED:5E:E4:D6:D9:51:77:79:C4:62:7D:A0:2C:49:4F:2D:B4:3E:FF
Certificate issuer:       /CN=A5869529D5045BE846944304A74862560C583B82
Certificate serial:       458B63413EC095D57C70F372CD2E9D019E52D54E
Authority key identifier: A5:86:95:29:D5:04:5B:E8:46:94:43:04:A7:48:62:56:0C:58:3B:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5869529D5045BE846944304A74862560C583B82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/3137302e3135302e382e302f32322d3234203d3e20323634373132.roa
Signing time:             Tue 06 Jan 2026 19:20:28 +0000
ROA not before:           Tue 06 Jan 2026 19:15:28 +0000
ROA not after:            Tue 05 Jan 2027 19:20:28 +0000
asID:                     264712
IP address blocks:        170.150.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.crl
                          rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5869529D5045BE846944304A74862560C583B82.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8b:63:41:3e:c0:95:d5:7c:70:f3:72:cd:2e:9d:01:9e:52:d5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5869529D5045BE846944304A74862560C583B82
        Validity
            Not Before: Jan  6 19:15:28 2026 GMT
            Not After : Jan  5 19:20:28 2027 GMT
        Subject: CN=32ED5EE4D6D9517779C4627DA02C494F2DB43EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1a:dc:1e:eb:e1:ef:bc:f0:da:02:78:da:fa:
                    c8:2e:39:d1:c0:53:86:44:34:67:7e:c2:00:43:df:
                    b4:72:d9:5d:5f:44:00:19:8f:18:3d:12:9c:87:4e:
                    14:d9:24:45:a2:74:23:de:f7:54:cb:3c:88:20:10:
                    e1:46:e2:66:9c:97:5d:24:c3:e2:e1:45:ed:42:4d:
                    2b:46:08:5e:10:08:14:81:8a:86:2b:e4:36:d0:55:
                    d2:a0:69:b2:f9:e9:13:75:25:55:f7:39:e8:1e:79:
                    fa:c7:1b:8c:ba:ac:0e:22:c0:9b:a1:e7:49:54:52:
                    73:98:68:92:19:75:33:82:a1:9f:7e:7d:db:2c:36:
                    e8:ef:7d:c1:f6:70:d3:59:2d:d1:f5:94:6a:a5:50:
                    4f:17:63:6d:70:f0:e6:f6:e1:f5:cc:df:e6:41:e0:
                    32:5a:eb:e8:af:7f:9c:ec:8f:f7:00:09:26:99:12:
                    fc:11:b3:18:2f:3b:24:dc:0d:c8:ce:38:9f:a1:9c:
                    1b:b6:57:0f:dd:1e:dd:22:ad:c7:7f:3e:e2:06:b9:
                    c6:d8:fe:f1:36:ad:74:5f:50:23:64:9d:a1:1c:08:
                    06:c3:7e:f1:01:2c:30:ee:43:dd:3b:28:25:8f:a7:
                    12:66:f4:14:cc:1e:50:50:6c:ea:39:70:7f:13:73:
                    7d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:ED:5E:E4:D6:D9:51:77:79:C4:62:7D:A0:2C:49:4F:2D:B4:3E:FF
            X509v3 Authority Key Identifier:
                keyid:A5:86:95:29:D5:04:5B:E8:46:94:43:04:A7:48:62:56:0C:58:3B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5869529D5045BE846944304A74862560C583B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/3137302e3135302e382e302f32322d3234203d3e20323634373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:73:d7:70:f8:1c:0f:5a:55:ea:75:87:55:d2:c0:df:f6:e8:
         be:64:08:67:35:3b:e2:4c:90:18:4f:2c:6b:bf:55:b6:98:18:
         39:ce:74:3e:27:29:a4:19:cd:af:6b:82:81:9f:9f:71:a7:c9:
         7c:97:fa:63:33:74:73:1c:e5:4a:77:62:72:b7:91:f7:f0:08:
         98:a1:57:95:c3:5a:ea:08:a1:52:c6:86:0e:bb:1f:91:bf:88:
         8d:09:67:53:f8:da:46:d3:6a:5f:42:c4:e5:61:47:b1:2e:fd:
         c9:b8:e3:fb:e6:a6:32:f5:84:bb:e0:a9:48:b9:d3:7e:f6:be:
         48:e9:2f:96:f8:ab:4f:81:47:ba:13:5f:cd:bd:a6:9c:98:87:
         c2:b9:27:dd:b6:09:65:33:3a:74:e0:a9:86:d8:74:ab:e8:a6:
         b6:a8:cc:a6:9a:37:3b:a3:c5:a7:d1:c4:ed:cf:c8:5c:d3:87:
         0d:37:62:ec:04:63:c2:e1:2a:a3:f3:77:26:10:c2:9e:17:c4:
         1b:9d:1b:85:fe:5a:e4:16:a9:75:88:78:8b:df:a4:1a:21:de:
         16:61:ba:31:92:f3:3e:1e:63:bc:6b:51:ee:c5:8e:a1:0c:b4:
         98:66:4b:9c:b5:e6:11:1a:2d:f8:3a:34:54:5e:44:29:e7:35:
         30:f5:6c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:23 2026 by rpki-client